Which software can I use to monitor my network?
 

Hi,

Which software can I use to monitor my network?

I have a Debian server which act as a router / DHCP / DNS / firewall server.

I want to see what the network clients are doing?
For example: the webpages, the ammount of data-traffic, ect.

Greetz

Wireshark

Snort is probably the best framework for you. Other x86 firewall, like PFsense and SmoothWall also offer built in monitoring interfaces.

You can also make a script parsing the netstat command to monitor different connection to individual websites. It will be easier to read than follow wireshark output.

Maybe squid?

I often got problem with WireShark

PErhaps the best idea would be to install a security gateway.

Untangle is a very good, reliable and stable solution for that.

What you need is a computer with a decent processor, 1 GB RAM, 500Gb HD and at least 2 network cards.

It has Spam,spyware, protocol, file type and intrusion filters and a nice web filter, where u can check your users activity.

I use it and is very good.

I'd go with Squid too, it's highly configurable and with some extra stuff like Sarg you can get reporting out of it.

Kind regards,

Eric